An observation record, not an assessment. Every row below is a change we recorded directly, with the content hash before and after. https://agentsvc.io/mcp
20 of these transitions happened while the reported version string stayed the same. A consumer pinning that version would have received a different tool surface with nothing in the version to indicate it. That is a compatibility and review fact, not a security finding and not an allegation of wrongdoing — unversioned iteration is normal practice and is frequently deliberate.
| observed at (UTC) | change | version signal | reported version | tools | surface hash |
|---|---|---|---|---|---|
| 2026-10-10 19:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | +scam_message_check | acc4ac3e3558 → 726277694301 |
| 2026-10-10 13:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | no tool-name change recorded | f3fe647c0db3 → 039cdd11cb8e |
| 2026-10-10 13:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | +answer_with_sources +company_enrich +image_alt_text +news_sentiment +page_extract +page_summarize +prompt_injection_check +seo_meta +token_ai_verdict | 4e1a33cb353a → acc4ac3e3558 |
| 2026-10-10 07:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | +accessibility_check +company_brief +privacy_check | 88f1dea571f0 → 4e1a33cb353a |
| 2026-10-09 19:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | no tool-name change recorded | ebd833722d70 → c3f0faded265 |
| 2026-10-09 07:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | +feed_watch +page_watch +token_watch +wallet_watch +watch_create +watch_delete +watch_list | 56de170f888b → 88f1dea571f0 |
| 2026-10-08 19:40:05Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | no tool-name change recorded | 53b6f2360a75 → 2c2d43c4bd98 |
| 2026-10-08 13:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | no tool-name change recorded | 6a42e0a7f9b6 → 53b6f2360a75 |
| 2026-10-08 13:40:03Z | PARAMS_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | no tool-name change recorded | 06a4eb918155 → 5d46980bd07d |
| 2026-10-08 13:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | +satellite_compare | c87c068c4648 → 56de170f888b |
| 2026-10-08 07:40:02Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | no tool-name change recorded | a0684400f7fb → 6a42e0a7f9b6 |
| 2026-10-08 07:40:02Z | SURFACE_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | −stock_prices | e097ab8b342f → c87c068c4648 |
| 2026-10-07 19:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | no tool-name change recorded | 9656740caaff → a0684400f7fb |
| 2026-10-07 19:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | +token_verdict | 32711d6d4c2c → e097ab8b342f |
| 2026-10-07 13:40:04Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | no tool-name change recorded | 40fecc719f85 → 9656740caaff |
| 2026-10-07 07:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | no tool-name change recorded | c56624e666d3 → 40fecc719f85 |
| 2026-10-07 07:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | +discussion_search | f8e97fe39b0d → 32711d6d4c2c |
| 2026-10-06 19:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | no tool-name change recorded | 734866df9148 → c56624e666d3 |
| 2026-10-06 19:40:03Z | PARAMS_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | no tool-name change recorded | ae4579732c47 → 775044c10b0b |
| 2026-10-06 19:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 2.1.0 (unchanged) | +airport_status +chart_render +company_lookup +crypto_news +cve_lookup +defi_tvl +dev_search +diagram_render +doc_convert +doc_parse +domain_check +email_verify +gas_price +holidays +iban_validate +language_detect +macro_data +paper_search +perp_funding +postal_code +product_lookup +sanctions_screen +satellite_image +search_read +sec_filings +site_crawl +site_map +tech_stack +text_embed +token_security +trends_hot +tts +useragent_parse +vat_validate +vin_decode | 63f7804239ce → f8e97fe39b0d |
| 2026-10-06 13:40:04Z | DESCRIPTION_CHANGED | version-signalled | 2.0.0 → 2.1.0 | no tool-name change recorded | b9fac00e63bd → 734866df9148 |
| 2026-10-06 13:40:04Z | SURFACE_CHANGED | version-signalled | 2.0.0 → 2.1.0 | +defi_yields +erc20_info +evm_tx +hyperliquid +prediction_markets +web_read_batch | b9c6e331cfbd → 63f7804239ce |
This section is identical for ~92% of publishers and is published as
shared context, not as a finding about agentsvc.io. 90 dependency
packages sit beneath the measured MCP population; 41 have a
single maintainer and 31 have not published in over two years.
The widest is zod at
80.46% of npm-backed servers (8529 servers,
1 maintainer, last publish 2026-09-13).
These are properties of the shared SDK dependency closure. Any page claiming this set as
one operator's personal exposure is misreading a universal fact as a private one.
Source: state/mcp-census/chokepoint-maintainers.json, as_of 2026-10-07.
Observation window 2026-09-21 → 2026-10-10.
22,294 servers were observed; 2,214
were seen to change and 20,080 were observed and
recorded no change — that negative control is why a non-zero count here means something.
Across the corpus, 4,781 of
6,334 changes carried no version signal, and
1,690 of those added or removed tools.
What this does NOT cover: servers outside the observed set; changes that
occurred before 2026-09-21; changes that began and reverted between two observations;
and any server reachable only with credentials we do not hold. A server's absence from this
record is not evidence it did not change — only that we did not observe it.
Universe captured 2026-10-10T19:40:03.823Z. Produced by core/surface_history_page.cjs (reads core/surface_clock producers).
Hashes are of the served tool surface and are recomputable from the server's own response.